The Microsoft vulnerability could result in gained system privileges, while the Cisco vulnerabilities could lead to a DoS attack. The U.S. Cybersecurity and Infrastructure Security Agency has put out ...

Software based on the Unified Extensible Firmware Interface (UEFI) standard makes up the firmware of most modern desktop computers and servers. This software is largely invisible to users, critical to ...

Microsoft responded to a report published last week by London-based security intelligence firm Mi2g Ltd. that claimed the Apple Macintosh operating system (OS) and certain varieties of Unix are less ...

The company says fixes are now available for the flaw affecting several versions of its PAN-OS firewall software. Meanwhile, researchers from Volexity say that a ‘spike in exploitation’ is likely.

For the February vulnerability scorecard, I’ve added one additional platform, Novell’s SuSE Linux Enterprise Desktop 10 (SLED10). As I did for the other Linux distributions, I take the default SLED10 ...

The number of privilege escalation bugs in Microsoft's products increased for the second year in a row in 2021, highlighting the growing risk this vulnerability category poses for organizations.

CISA and the FBI urged software companies on Wednesday to review their products and eliminate path OS command injection vulnerabilities before shipping. Velvet Ant, the Chinese state-sponsored threat ...

Every day has the potential to be a bad day for a CSO. However, the second Tuesday of each month – Patch Tuesday – is almost guaranteed to be one of those days, though with any luck it’s merely ...